This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft File: _10TK8Zqqiu89lw-X-iaDDcdizo.mft (raw, json) Hash identifier: x/DTnIcv1zAfFAy0cCFZAkzt4afA17FxxmFbGLIiZvA= Subject key identifier: DC:2E:12:E8:CA:8B:9C:01:8A:E1:8A:11:B6:DB:53:5E:21:0F:17:E7 Authority key identifier: FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A Certificate issuer: /CN=A91C1FA7/serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A Certificate serial: 0251 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft Manifest number: 024B Signing time: Fri 19 Dec 2025 00:59:19 +0000 Manifest this update: Fri 19 Dec 2025 00:59:18 +0000 Manifest next update: Fri 26 Dec 2025 00:59:18 +0000 Files and hashes: 1: _10TK8Zqqiu89lw-X-iaDDcdizo.crl (hash: SSI1LvvcoBT4zzpERpQi/H4XuLAfCEN+7Y+VvVdlnc4=) 2: 064042F259F511EDB22E3F2BC4F9AE02.roa (hash: S8UZRzpubYCJ+X0jACj9ZehbJ6hRsnjRgE1noRmlqCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:59:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 593 (0x251) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FA7, serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A Validity Not Before: Dec 19 00:59:18 2025 GMT Not After : Dec 26 00:59:18 2025 GMT Subject: CN=6944a367-4191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ca:e2:ea:a6:b7:e6:69:30:c5:6d:ff:43:90: 79:39:f1:fc:cc:e8:e3:1b:dc:50:3a:0c:c8:94:da: bc:0f:a7:c0:c1:16:d0:d8:bd:78:68:d7:aa:b2:18: 8f:10:22:63:3a:78:eb:ad:68:b7:07:53:d9:66:bd: d4:93:2a:34:40:30:b7:a9:dc:13:95:46:d6:e1:0e: d4:e2:a9:87:b8:f9:95:43:27:45:e9:fa:d3:37:75: 13:5f:00:9e:0a:32:e7:50:2a:4b:ac:a4:28:02:ca: 0e:31:c5:c4:b0:66:4e:18:6a:95:da:0c:0a:f9:3a: c2:ba:af:b1:71:df:de:ee:13:f8:5a:a2:e9:2c:d7: 75:b8:d1:ff:cf:cd:be:ee:1a:f9:0a:5f:ef:df:31: 88:f9:ab:53:ce:0c:d4:83:76:02:cf:2d:b9:bf:3b: c4:58:95:9d:e7:ff:0c:17:29:db:eb:75:7d:5e:27: 2b:37:94:95:75:68:bb:26:20:11:02:aa:3d:3f:8f: 4d:aa:8f:62:fa:0a:98:fd:a1:2e:d2:60:d1:40:59: d9:ec:7a:6d:2f:f4:e9:a8:6b:37:5d:21:13:e9:c0: 3d:0e:2a:7a:3a:e8:a2:c0:19:b5:e4:2a:58:78:19: d8:91:2f:84:2a:c8:c1:eb:b3:08:1a:f5:c2:1c:90: bb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:2E:12:E8:CA:8B:9C:01:8A:E1:8A:11:B6:DB:53:5E:21:0F:17:E7 X509v3 Authority Key Identifier: keyid:FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:94:a6:f4:f8:0c:08:88:97:36:eb:b8:f6:e2:06:9b:c1:43: 8c:ea:1b:56:47:bb:c8:29:90:89:be:55:d8:d2:71:f3:f0:fe: 84:22:72:15:a4:ee:de:51:c8:1f:c7:c5:c8:75:96:7e:dd:2b: 69:4f:72:9c:df:43:c4:05:cc:f6:66:3d:b7:62:ab:72:95:13: a3:e0:05:c3:c6:0c:8e:53:ae:53:d8:7c:69:37:0b:fd:ee:0f: c0:90:ca:78:91:e4:c5:08:8c:13:ca:e1:3a:89:e5:62:93:57: 54:8b:71:55:18:77:7e:49:d7:71:0b:2d:68:57:27:28:e4:d5: d8:c3:98:eb:a1:5f:49:87:34:ad:7e:91:16:eb:07:d8:2e:f3: eb:10:34:6b:0b:92:f2:ca:79:c3:6a:7a:47:0e:7e:d5:d3:b2: 1e:25:df:1f:d2:f6:91:9c:e0:d4:34:6d:22:0c:95:8b:1d:47: 6a:0f:ae:b3:bf:b1:19:ca:5d:a5:6b:7c:1d:b1:d0:f1:83:ec: 54:a3:73:82:96:4c:ff:f1:ca:a0:d3:0e:29:6c:b2:ac:5d:29: 32:fb:89:5d:06:26:ca:37:7c:04:df:e2:d2:28:6c:71:9e:29: c7:3d:c7:62:02:31:8c:a1:42:55:a8:57:27:b4:81:e1:7a:30: 9b:0a:e3:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQTcxMTAvBgNVBAUTKEZGNUQxMzJCQzY2QUFBMkJCQ0Y2NUMzRTVGRTg5QTBD MzcxRDhCM0EwHhcNMjUxMjE5MDA1OTE4WhcNMjUxMjI2MDA1OTE4WjAYMRYwFAYD VQQDDA02OTQ0YTM2Ny00MTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2sri6qa35mkwxW3/Q5B5OfH8zOjjG9xQOgzIlNq8D6fAwRbQ2L14aNeqshiP ECJjOnjrrWi3B1PZZr3Ukyo0QDC3qdwTlUbW4Q7U4qmHuPmVQydF6frTN3UTXwCe CjLnUCpLrKQoAsoOMcXEsGZOGGqV2gwK+TrCuq+xcd/e7hP4WqLpLNd1uNH/z82+ 7hr5Cl/v3zGI+atTzgzUg3YCzy25vzvEWJWd5/8MFynb63V9XicrN5SVdWi7JiAR Aqo9P49Nqo9i+gqY/aEu0mDRQFnZ7HptL/TpqGs3XSET6cA9Dip6OuiiwBm15CpY eBnYkS+EKsjB67MIGvXCHJC7JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwuEujK i5wBiuGKEbbbU14hDxfnMB8GA1UdIwQYMBaAFP9dEyvGaqorvPZcPl/omgw3HYs6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZBNy8yRDk5MUNEMDU5 OUYxMUVEQjk2N0FFMzlDNEY5QUUwMi9fMTBUSzhacXFpdTg5bHctWC1pYUREY2Rp em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18xMFRLOFpxcWl1ODlsdy1YLWlhRERjZGl6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUZBNy8yRDk5MUNEMDU5OUYxMUVEQjk2N0FFMzlDNEY5QUUwMi9fMTBUSzhacXFp dTg5bHctWC1pYUREY2Rpem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTlKb0+AwIiJc267j24gabwUOM6htWR7vIKZCJvlXY0nHz8P6EInIV pO7eUcgfx8XIdZZ+3StpT3Kc30PEBcz2Zj23YqtylROj4AXDxgyOU65T2HxpNwv9 7g/AkMp4keTFCIwTyuE6ieVik1dUi3FVGHd+SddxCy1oVyco5NXYw5jroV9JhzSt fpEW6wfYLvPrEDRrC5LyynnDanpHDn7V07IeJd8f0vaRnODUNG0iDJWLHUdqD66z v7EZyl2la3wdsdDxg+xUo3OClkz/8cqg0w4pbLKsXSky+4ldBibKN3wE3+LSKGxx ninHPcdiAjGMoUJVqFcntIHhejCbCuPL -----END CERTIFICATE-----Generated at Fri Dec 19 20:15:33 2025 by rpki-client